Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
File: vJldFVAngKzfe25qGGXttaDn3Es.mft (raw, json)
Hash identifier: HZsUS3w7v10/fsRssa+Dl3G3yCskPt8H1CpvXmuqRCE=
Subject key identifier: 4A:D1:AE:0C:75:E4:D4:26:57:5F:D3:A5:D5:31:B2:20:75:B3:A5:3D
Authority key identifier: BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
Certificate issuer: /CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Certificate serial: 01A05A4437FAC517D2140504602DBEE39A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
Manifest number: 07E4
Signing time: Tue 01 Sep 2026 00:00:15 +0000
Manifest this update: Tue 01 Sep 2026 00:00:15 +0000
Manifest next update: Wed 02 Sep 2026 00:00:15 +0000
Files and hashes: 1: LgX3EnuU8OfYYtzP7MkhOHIuG6k.roa (hash: tdx965ReIy+ujDSCSzvpO67kGikMuRqJQAFubursvgs=)
2: gzoeZ2AgO1ey7ZNcukJz3zjT1LY.roa (hash: argro5YsxjIunpkmHi4BZRWmPpTrNV/wF+jpyXPN3DM=)
3: vJldFVAngKzfe25qGGXttaDn3Es.crl (hash: 5mxuiAiQJ2qh5GGtQuktcUPWMPw3KyMu+A+hEdU3qpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:44:37:fa:c5:17:d2:14:05:04:60:2d:be:e3:9a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Validity
Not Before: Sep 1 00:00:15 2026 GMT
Not After : Sep 2 00:00:15 2026 GMT
Subject: CN=4ad1ae0c75e4d426575fd3a5d531b22075b3a53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cb:7e:86:78:75:12:a4:9a:c4:6f:9b:fa:24:
fb:a3:d7:0b:90:3e:c1:46:33:9f:73:d9:82:e3:6a:
e6:a8:52:77:ce:aa:50:19:fb:24:42:36:eb:cb:0c:
4b:3a:7c:a5:dd:54:be:2f:7a:07:30:14:75:e1:10:
45:65:a5:de:7d:74:db:b2:67:6f:2d:a7:7b:d0:c2:
88:b8:1d:5c:75:e1:df:5b:5e:36:04:58:a3:b3:38:
54:9f:c9:26:e0:9e:08:59:ca:33:c9:3a:fc:15:58:
c3:3a:6c:35:97:c4:63:a1:39:31:6f:a2:bc:8c:27:
2f:a3:23:82:30:53:0b:28:e6:30:40:75:bc:7a:22:
b9:10:92:be:ea:68:e1:99:9c:35:ca:a3:09:3a:bb:
7a:de:44:a1:19:e3:ed:2f:f3:d3:af:e9:67:37:77:
70:17:6b:84:f9:4c:bc:8e:f3:8f:a2:e2:39:c2:88:
3f:c1:30:04:7b:cf:67:b3:e9:1a:ff:6b:85:5f:3e:
a4:71:9c:5c:3a:9d:40:ca:94:19:e3:75:09:0e:a6:
9f:72:ce:1a:d7:69:2e:28:6a:e4:26:1d:e4:8f:b9:
ef:36:20:e6:da:9a:75:29:8c:a4:74:61:43:ef:da:
ab:1a:29:a5:65:7c:f0:70:a7:02:99:46:c3:c2:1d:
dc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D1:AE:0C:75:E4:D4:26:57:5F:D3:A5:D5:31:B2:20:75:B3:A5:3D
X509v3 Authority Key Identifier:
keyid:BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5a:82:94:f9:3b:ad:ca:ad:39:d8:02:b7:9f:5f:64:d9:fa:
1a:6a:be:55:a8:6b:74:47:c2:8c:55:b8:07:1c:11:6c:df:4f:
5e:54:66:b7:9e:5f:a7:dd:df:4c:77:58:e6:ab:10:4d:29:b0:
f2:d3:40:90:60:07:8b:89:c4:c8:13:2d:84:c5:24:8a:11:71:
8d:12:98:09:3e:b4:5e:66:c8:99:d3:c5:24:15:89:38:1e:4c:
73:19:cc:93:27:14:aa:37:48:c0:e4:a8:ab:d1:3c:78:88:f4:
f4:3c:13:3f:77:54:e0:91:d4:f7:56:be:96:ad:92:90:88:cf:
a8:37:02:c3:6b:d4:fc:1f:6b:9c:2e:ee:b1:3c:0c:36:45:a9:
f7:ed:f6:1c:ec:86:21:68:69:ad:f5:78:4d:c5:ad:bd:dc:9f:
c8:2c:8c:79:e8:b6:f3:09:e9:c2:89:f4:16:1e:a0:96:99:bd:
1d:de:60:76:d2:b3:40:68:f4:cd:91:d0:7d:15:91:1b:66:2d:
b0:f9:47:a7:55:f7:76:1b:09:83:a9:63:bc:d5:eb:90:17:7d:
f3:f3:29:fb:3e:5c:69:1f:1f:a1:0b:fb:ca:a9:8e:0d:1c:d7:
4b:2c:68:23:59:df:64:34:ce:f7:58:d8:1b:30:f8:11:d1:e0:
7f:1a:83:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBaRDf6xRfSFAUEYC2+45o/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOTk1ZDE1NTAyNzgwYWNkZjdiNmU2YTE4NjVlZGI1YTBl
N2RjNGIwHhcNMjYwOTAxMDAwMDE1WhcNMjYwOTAyMDAwMDE1WjAzMTEwLwYDVQQD
Eyg0YWQxYWUwYzc1ZTRkNDI2NTc1ZmQzYTVkNTMxYjIyMDc1YjNhNTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMt+hnh1EqSaxG+b+iT7o9cLkD7B
RjOfc9mC42rmqFJ3zqpQGfskQjbrywxLOnyl3VS+L3oHMBR14RBFZaXefXTbsmdv
Lad70MKIuB1cdeHfW142BFijszhUn8km4J4IWcozyTr8FVjDOmw1l8RjoTkxb6K8
jCcvoyOCMFMLKOYwQHW8eiK5EJK+6mjhmZw1yqMJOrt63kShGePtL/PTr+lnN3dw
F2uE+Uy8jvOPouI5wog/wTAEe89ns+ka/2uFXz6kcZxcOp1AypQZ43UJDqafcs4a
12kuKGrkJh3kj7nvNiDm2pp1KYykdGFD79qrGimlZXzwcKcCmUbDwh3cAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErRrgx15NQmV1/TpdUxsiB1s6U9MB8GA1UdIwQY
MBaAFLyZXRVQJ4Cs33tuahhl7bWg59xLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkpsZEZWQW5nS3pmZTI1cUdHWHR0YURuM0VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wNDQzNTAtOGNjOS00ODZkLTg3Yzkt
NTcyYzRlMTI5ZDMyLzEvdkpsZEZWQW5nS3pmZTI1cUdHWHR0YURuM0VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8wNDQzNTAtOGNjOS00ODZkLTg3YzktNTcyYzRlMTI5ZDMy
LzEvdkpsZEZWQW5nS3pmZTI1cUdHWHR0YURuM0VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqlqClPk7
rcqtOdgCt59fZNn6Gmq+VahrdEfCjFW4BxwRbN9PXlRmt55fp93fTHdY5qsQTSmw
8tNAkGAHi4nEyBMthMUkihFxjRKYCT60XmbImdPFJBWJOB5McxnMkycUqjdIwOSo
q9E8eIj09DwTP3dU4JHU91a+lq2SkIjPqDcCw2vU/B9rnC7usTwMNkWp9+32HOyG
IWhprfV4TcWtvdyfyCyMeei28wnpwon0Fh6glpm9Hd5gdtKzQGj0zZHQfRWRG2Yt
sPlHp1X3dhsJg6ljvNXrkBd98/Mp+z5caR8foQv7yqmODRzXSyxoI1nfZDTO91jY
GzD4EdHgfxqDxw==
-----END CERTIFICATE-----
Generated at Tue Sep 1 03:42:11 2026 by rpki-client